hazo_core 1.0.0

package/dist/errors/from_zod.js

@@ -0,0 +1,63 @@
+import { HazoValidationError } from './validation.js';
+import { HazoConfigError } from './config.js';
+/**
+ * Maps a ZodError's issues array to the ValidationIssue shape.
+ */
+function mapZodIssues(zodError) {
+    return zodError.issues.map((issue) => ({
+        path: issue.path,
+        message: issue.message,
+    }));
+}
+/**
+ * Create a HazoValidationError from a ZodError.
+ * Typically used for request body / query param validation failures.
+ *
+ * @example
+ * const result = mySchema.safeParse(input);
+ * if (!result.success) {
+ *   throw fromZodValidation(result.error, { pkg: 'hazo_auth', code: 'HAZO_AUTH_INVALID_INPUT' });
+ * }
+ */
+export function fromZodValidation(zodError, opts) {
+    const issues = mapZodIssues(zodError);
+    const message = issues.length === 1
+        ? issues[0].message
+        : `${issues.length} validation error(s): ${issues.map((i) => i.message).join('; ')}`;
+    return new HazoValidationError({
+        code: opts.code,
+        pkg: opts.pkg,
+        message,
+        httpStatus: opts.httpStatus,
+        issues,
+        context: {
+            zodIssues: zodError.issues,
+        },
+    });
+}
+/**
+ * Create a HazoConfigError from a ZodError.
+ * Typically used when a package's INI config fails its Zod schema validation.
+ *
+ * @example
+ * const result = configSchema.safeParse(rawConfig);
+ * if (!result.success) {
+ *   throw fromZodConfig(result.error, { pkg: 'hazo_auth', code: 'HAZO_AUTH_CONFIG_INVALID' });
+ * }
+ */
+export function fromZodConfig(zodError, opts) {
+    const issues = mapZodIssues(zodError);
+    const message = issues.length === 1
+        ? `Config error: ${issues[0].message}`
+        : `Config has ${issues.length} error(s): ${issues.map((i) => `[${i.path.join('.')}] ${i.message}`).join('; ')}`;
+    return new HazoConfigError({
+        code: opts.code,
+        pkg: opts.pkg,
+        message,
+        context: {
+            configIssues: issues,
+            zodIssues: zodError.issues,
+        },
+    });
+}
+//# sourceMappingURL=from_zod.js.map

package/dist/errors/from_zod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"from_zod.js","sourceRoot":"","sources":["../../src/errors/from_zod.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAwB,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C;;GAEG;AACH,SAAS,YAAY,CAAC,QAAkB;IACtC,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,KAAK,CAAC,IAA2B;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAkB,EAClB,IAAwD;IAExD,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GACX,MAAM,CAAC,MAAM,KAAK,CAAC;QACjB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO;QACpB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,yBAAyB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAEzF,OAAO,IAAI,mBAAmB,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,OAAO;QACP,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM;QACN,OAAO,EAAE;YACP,SAAS,EAAE,QAAQ,CAAC,MAAM;SAC3B;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAkB,EAClB,IAAmC;IAEnC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,OAAO,GACX,MAAM,CAAC,MAAM,KAAK,CAAC;QACjB,CAAC,CAAC,iBAAiB,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE;QACvC,CAAC,CAAC,cAAc,MAAM,CAAC,MAAM,cAAc,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAEpH,OAAO,IAAI,eAAe,CAAC;QACzB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,OAAO;QACP,OAAO,EAAE;YACP,YAAY,EAAE,MAAM;YACpB,SAAS,EAAE,QAAQ,CAAC,MAAM;SAC3B;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/errors/index.d.ts

@@ -0,0 +1,22 @@
+export { HazoError } from './base.js';
+export type { HazoErrorOptions } from './base.js';
+export { HazoValidationError } from './validation.js';
+export type { HazoValidationErrorOptions, ValidationIssue } from './validation.js';
+export { HazoAuthError } from './auth.js';
+export type { HazoAuthErrorOptions } from './auth.js';
+export { HazoNotFoundError } from './not_found.js';
+export type { HazoNotFoundErrorOptions } from './not_found.js';
+export { HazoConflictError } from './conflict.js';
+export type { HazoConflictErrorOptions } from './conflict.js';
+export { HazoRateLimitError } from './rate_limit.js';
+export type { HazoRateLimitErrorOptions } from './rate_limit.js';
+export { HazoUnavailableError } from './unavailable.js';
+export type { HazoUnavailableErrorOptions } from './unavailable.js';
+export { HazoExternalError } from './external.js';
+export type { HazoExternalErrorOptions } from './external.js';
+export { HazoConfigError } from './config.js';
+export type { HazoConfigErrorOptions } from './config.js';
+export { HazoInternalError } from './internal.js';
+export type { HazoInternalErrorOptions } from './internal.js';
+export { fromZodValidation, fromZodConfig } from './from_zod.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,YAAY,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEnF,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,YAAY,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,YAAY,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,YAAY,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAEjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,YAAY,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAEpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,YAAY,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,YAAY,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,YAAY,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/errors/index.js

@@ -0,0 +1,12 @@
+export { HazoError } from './base.js';
+export { HazoValidationError } from './validation.js';
+export { HazoAuthError } from './auth.js';
+export { HazoNotFoundError } from './not_found.js';
+export { HazoConflictError } from './conflict.js';
+export { HazoRateLimitError } from './rate_limit.js';
+export { HazoUnavailableError } from './unavailable.js';
+export { HazoExternalError } from './external.js';
+export { HazoConfigError } from './config.js';
+export { HazoInternalError } from './internal.js';
+export { fromZodValidation, fromZodConfig } from './from_zod.js';
+//# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAGtD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGlD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGlD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGlD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/errors/internal.d.ts

@@ -0,0 +1,14 @@
+import { HazoError, type HazoErrorOptions } from './base.js';
+/**
+ * HazoInternalError — programmer error / invariant violation.
+ * Not retryable. Distinct from HazoExternalError ("their bug") or HazoUnavailableError
+ * (temporary condition) — this is "our bug".
+ */
+export type HazoInternalErrorOptions = Omit<HazoErrorOptions, 'httpStatus' | 'retryable'> & {
+    httpStatus?: number;
+};
+export declare class HazoInternalError extends HazoError {
+    constructor(opts: HazoInternalErrorOptions);
+    toUserMessage(): string;
+}
+//# sourceMappingURL=internal.d.ts.map

package/dist/errors/internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../src/errors/internal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,WAAW,CAAC,GAAG;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,qBAAa,iBAAkB,SAAQ,SAAS;gBAClC,IAAI,EAAE,wBAAwB;IAQ1C,aAAa,IAAI,MAAM;CAGxB"}

package/dist/errors/internal.js

@@ -0,0 +1,14 @@
+import { HazoError } from './base.js';
+export class HazoInternalError extends HazoError {
+    constructor(opts) {
+        super({
+            httpStatus: 500,
+            retryable: false,
+            ...opts,
+        });
+    }
+    toUserMessage() {
+        return 'An unexpected error occurred. Please try again.';
+    }
+}
+//# sourceMappingURL=internal.js.map

package/dist/errors/internal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../src/errors/internal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyB,MAAM,WAAW,CAAC;AAW7D,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,YAAY,IAA8B;QACxC,KAAK,CAAC;YACJ,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,KAAK;YAChB,GAAG,IAAI;SACR,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,OAAO,iDAAiD,CAAC;IAC3D,CAAC;CACF"}

package/dist/errors/not_found.d.ts

@@ -0,0 +1,9 @@
+import { HazoError, type HazoErrorOptions } from './base.js';
+export type HazoNotFoundErrorOptions = Omit<HazoErrorOptions, 'httpStatus' | 'retryable'> & {
+    httpStatus?: number;
+};
+export declare class HazoNotFoundError extends HazoError {
+    constructor(opts: HazoNotFoundErrorOptions);
+    toUserMessage(): string;
+}
+//# sourceMappingURL=not_found.d.ts.map

package/dist/errors/not_found.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"not_found.d.ts","sourceRoot":"","sources":["../../src/errors/not_found.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,WAAW,CAAC,GAAG;IAC1F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,qBAAa,iBAAkB,SAAQ,SAAS;gBAClC,IAAI,EAAE,wBAAwB;IAQ1C,aAAa,IAAI,MAAM;CAIxB"}

package/dist/errors/not_found.js

@@ -0,0 +1,15 @@
+import { HazoError } from './base.js';
+export class HazoNotFoundError extends HazoError {
+    constructor(opts) {
+        super({
+            httpStatus: 404,
+            retryable: false,
+            ...opts,
+        });
+    }
+    toUserMessage() {
+        const resource = this.context?.['resource'];
+        return resource ? `${String(resource)} not found.` : 'Resource not found.';
+    }
+}
+//# sourceMappingURL=not_found.js.map

package/dist/errors/not_found.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"not_found.js","sourceRoot":"","sources":["../../src/errors/not_found.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyB,MAAM,WAAW,CAAC;AAM7D,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,YAAY,IAA8B;QACxC,KAAK,CAAC;YACJ,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,KAAK;YAChB,GAAG,IAAI;SACR,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAC7E,CAAC;CACF"}

package/dist/errors/rate_limit.d.ts

@@ -0,0 +1,9 @@
+import { HazoError, type HazoErrorOptions } from './base.js';
+export type HazoRateLimitErrorOptions = Omit<HazoErrorOptions, 'httpStatus' | 'retryable'> & {
+    httpStatus?: number;
+};
+export declare class HazoRateLimitError extends HazoError {
+    constructor(opts: HazoRateLimitErrorOptions);
+    toUserMessage(): string;
+}
+//# sourceMappingURL=rate_limit.d.ts.map

package/dist/errors/rate_limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate_limit.d.ts","sourceRoot":"","sources":["../../src/errors/rate_limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,WAAW,CAAC,GAAG;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,qBAAa,kBAAmB,SAAQ,SAAS;gBACnC,IAAI,EAAE,yBAAyB;IAQ3C,aAAa,IAAI,MAAM;CAGxB"}

package/dist/errors/rate_limit.js

@@ -0,0 +1,14 @@
+import { HazoError } from './base.js';
+export class HazoRateLimitError extends HazoError {
+    constructor(opts) {
+        super({
+            httpStatus: 429,
+            retryable: true,
+            ...opts,
+        });
+    }
+    toUserMessage() {
+        return 'Too many requests. Please wait a moment before trying again.';
+    }
+}
+//# sourceMappingURL=rate_limit.js.map

package/dist/errors/rate_limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate_limit.js","sourceRoot":"","sources":["../../src/errors/rate_limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyB,MAAM,WAAW,CAAC;AAM7D,MAAM,OAAO,kBAAmB,SAAQ,SAAS;IAC/C,YAAY,IAA+B;QACzC,KAAK,CAAC;YACJ,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,IAAI;YACf,GAAG,IAAI;SACR,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,OAAO,8DAA8D,CAAC;IACxE,CAAC;CACF"}

package/dist/errors/unavailable.d.ts

@@ -0,0 +1,9 @@
+import { HazoError, type HazoErrorOptions } from './base.js';
+export type HazoUnavailableErrorOptions = Omit<HazoErrorOptions, 'httpStatus' | 'retryable'> & {
+    httpStatus?: number;
+};
+export declare class HazoUnavailableError extends HazoError {
+    constructor(opts: HazoUnavailableErrorOptions);
+    toUserMessage(): string;
+}
+//# sourceMappingURL=unavailable.d.ts.map

package/dist/errors/unavailable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unavailable.d.ts","sourceRoot":"","sources":["../../src/errors/unavailable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,MAAM,MAAM,2BAA2B,GAAG,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,WAAW,CAAC,GAAG;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,qBAAa,oBAAqB,SAAQ,SAAS;gBACrC,IAAI,EAAE,2BAA2B;IAQ7C,aAAa,IAAI,MAAM;CAGxB"}

package/dist/errors/unavailable.js

@@ -0,0 +1,14 @@
+import { HazoError } from './base.js';
+export class HazoUnavailableError extends HazoError {
+    constructor(opts) {
+        super({
+            httpStatus: 503,
+            retryable: true,
+            ...opts,
+        });
+    }
+    toUserMessage() {
+        return 'Service temporarily unavailable. Please try again in a moment.';
+    }
+}
+//# sourceMappingURL=unavailable.js.map

package/dist/errors/unavailable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unavailable.js","sourceRoot":"","sources":["../../src/errors/unavailable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyB,MAAM,WAAW,CAAC;AAM7D,MAAM,OAAO,oBAAqB,SAAQ,SAAS;IACjD,YAAY,IAAiC;QAC3C,KAAK,CAAC;YACJ,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,IAAI;YACf,GAAG,IAAI;SACR,CAAC,CAAC;IACL,CAAC;IAED,aAAa;QACX,OAAO,gEAAgE,CAAC;IAC1E,CAAC;CACF"}

package/dist/errors/validation.d.ts

@@ -0,0 +1,15 @@
+import { HazoError, type HazoErrorOptions } from './base.js';
+export interface ValidationIssue {
+    path: (string | number)[];
+    message: string;
+}
+export interface HazoValidationErrorOptions extends Omit<HazoErrorOptions, 'httpStatus' | 'retryable'> {
+    httpStatus?: number;
+    issues?: ValidationIssue[];
+}
+export declare class HazoValidationError extends HazoError {
+    readonly issues: ValidationIssue[];
+    constructor(opts: HazoValidationErrorOptions);
+    toUserMessage(): string;
+}
+//# sourceMappingURL=validation.d.ts.map

package/dist/errors/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/errors/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7D,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,0BAA2B,SAAQ,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,WAAW,CAAC;IACpG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,qBAAa,mBAAoB,SAAQ,SAAS;IAChD,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;gBAEvB,IAAI,EAAE,0BAA0B;IAS5C,aAAa,IAAI,MAAM;CAIxB"}

package/dist/errors/validation.js

@@ -0,0 +1,17 @@
+import { HazoError } from './base.js';
+export class HazoValidationError extends HazoError {
+    issues;
+    constructor(opts) {
+        super({
+            httpStatus: 400,
+            retryable: false,
+            ...opts,
+        });
+        this.issues = opts.issues ?? [];
+    }
+    toUserMessage() {
+        // Validation messages are written for users — safe to return directly.
+        return this.message;
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/errors/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/errors/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyB,MAAM,WAAW,CAAC;AAY7D,MAAM,OAAO,mBAAoB,SAAQ,SAAS;IACvC,MAAM,CAAoB;IAEnC,YAAY,IAAgC;QAC1C,KAAK,CAAC;YACJ,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,KAAK;YAChB,GAAG,IAAI;SACR,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,aAAa;QACX,uEAAuE;QACvE,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/http/fetch_with_request_id.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Drop-in replacement for fetch that injects X-Request-Id from the current
+ * AsyncLocalStorage context into the outbound request.
+ *
+ * If no correlationId is active, behaves identically to native fetch.
+ *
+ * Per architecture.md §7 (Outbound propagation).
+ *
+ * @example
+ * // Inside a withContext() scope, the correlation ID propagates automatically:
+ * const response = await fetchWithRequestId('https://api.example.com/data');
+ */
+export declare function fetchWithRequestId(input: RequestInfo | URL, init?: RequestInit): Promise<Response>;
+//# sourceMappingURL=fetch_with_request_id.d.ts.map

package/dist/http/fetch_with_request_id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch_with_request_id.d.ts","sourceRoot":"","sources":["../../src/http/fetch_with_request_id.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC,CAgBnB"}

package/dist/http/fetch_with_request_id.js

@@ -0,0 +1,29 @@
+import { getCorrelationId } from '../context/server.js';
+import { REQUEST_ID_HEADER } from '../constants.js';
+/**
+ * Drop-in replacement for fetch that injects X-Request-Id from the current
+ * AsyncLocalStorage context into the outbound request.
+ *
+ * If no correlationId is active, behaves identically to native fetch.
+ *
+ * Per architecture.md §7 (Outbound propagation).
+ *
+ * @example
+ * // Inside a withContext() scope, the correlation ID propagates automatically:
+ * const response = await fetchWithRequestId('https://api.example.com/data');
+ */
+export function fetchWithRequestId(input, init) {
+    const correlationId = getCorrelationId();
+    if (!correlationId) {
+        // No active context — pass through unchanged
+        return fetch(input, init);
+    }
+    // Merge the correlation ID header without mutating the caller's init
+    const headers = new Headers(init?.headers);
+    // Only set if not already present (caller's explicit header takes precedence)
+    if (!headers.has(REQUEST_ID_HEADER)) {
+        headers.set(REQUEST_ID_HEADER, correlationId);
+    }
+    return fetch(input, { ...init, headers });
+}
+//# sourceMappingURL=fetch_with_request_id.js.map

package/dist/http/fetch_with_request_id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch_with_request_id.js","sourceRoot":"","sources":["../../src/http/fetch_with_request_id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAwB,EACxB,IAAkB;IAElB,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,6CAA6C;QAC7C,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,qEAAqE;IACrE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,8EAA8E;IAC9E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/http/get_origin_url.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Gets the public-facing origin URL for redirect construction.
+ *
+ * Behind reverse proxies (Cloudflare, nginx, etc.), `request.url` contains the
+ * internal address (e.g. `http://localhost:3000`), not the public domain.
+ * This function returns the correct origin from environment variables.
+ *
+ * Priority: NEXTAUTH_URL > APP_DOMAIN_NAME > NEXT_PUBLIC_APP_URL > APP_URL > request.url
+ *
+ * @param request_url - The request.url to use as fallback
+ * @returns The origin URL (e.g. "https://gotimer.org")
+ */
+export declare function get_origin_url(request_url: string): string;
+/**
+ * Creates a URL using the public-facing origin instead of request.url.
+ * Drop-in replacement for `new URL(path, request.url)` in route handlers.
+ *
+ * @param path - The path or relative URL (e.g. "/hazo_auth/login")
+ * @param request_url - The request.url (used as fallback only)
+ * @returns A URL object with the correct public origin
+ */
+export declare function create_redirect_url(path: string, request_url: string): URL;
+//# sourceMappingURL=get_origin_url.d.ts.map

package/dist/http/get_origin_url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_origin_url.d.ts","sourceRoot":"","sources":["../../src/http/get_origin_url.ts"],"names":[],"mappings":"AAQA;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CA8B1D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,GAAG,CAG1E"}

package/dist/http/get_origin_url.js

@@ -0,0 +1,61 @@
+// file_description: Resolves the public-facing origin URL for constructing redirects.
+// When running behind a reverse proxy (Cloudflare, nginx), request.url resolves to
+// the internal address (e.g. http://localhost:3000). This utility returns the correct
+// public origin using environment variables.
+//
+// Canonical location: hazo_core/http (moved here from hazo_auth in hazo_core v1).
+// hazo_auth re-exports these from this module for backward compatibility.
+/**
+ * Gets the public-facing origin URL for redirect construction.
+ *
+ * Behind reverse proxies (Cloudflare, nginx, etc.), `request.url` contains the
+ * internal address (e.g. `http://localhost:3000`), not the public domain.
+ * This function returns the correct origin from environment variables.
+ *
+ * Priority: NEXTAUTH_URL > APP_DOMAIN_NAME > NEXT_PUBLIC_APP_URL > APP_URL > request.url
+ *
+ * @param request_url - The request.url to use as fallback
+ * @returns The origin URL (e.g. "https://gotimer.org")
+ */
+export function get_origin_url(request_url) {
+    // NEXTAUTH_URL is the standard for NextAuth.js apps
+    const nextauth_url = process.env['NEXTAUTH_URL'];
+    if (nextauth_url) {
+        return nextauth_url.replace(/\/$/, '');
+    }
+    // APP_DOMAIN_NAME (with protocol handling)
+    const app_domain = process.env['APP_DOMAIN_NAME'];
+    if (app_domain) {
+        const domain = app_domain.trim();
+        if (domain.startsWith('http://') || domain.startsWith('https://')) {
+            return domain.replace(/\/$/, '');
+        }
+        return `https://${domain}`;
+    }
+    // Other common env vars
+    const env_url = process.env['NEXT_PUBLIC_APP_URL'] || process.env['APP_URL'];
+    if (env_url) {
+        return env_url.replace(/\/$/, '');
+    }
+    // Fallback to request.url (works in development without a proxy)
+    try {
+        const url = new URL(request_url);
+        return url.origin;
+    }
+    catch {
+        return request_url;
+    }
+}
+/**
+ * Creates a URL using the public-facing origin instead of request.url.
+ * Drop-in replacement for `new URL(path, request.url)` in route handlers.
+ *
+ * @param path - The path or relative URL (e.g. "/hazo_auth/login")
+ * @param request_url - The request.url (used as fallback only)
+ * @returns A URL object with the correct public origin
+ */
+export function create_redirect_url(path, request_url) {
+    const origin = get_origin_url(request_url);
+    return new URL(path, origin);
+}
+//# sourceMappingURL=get_origin_url.js.map

package/dist/http/get_origin_url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get_origin_url.js","sourceRoot":"","sources":["../../src/http/get_origin_url.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,mFAAmF;AACnF,sFAAsF;AACtF,6CAA6C;AAC7C,EAAE;AACF,kFAAkF;AAClF,0EAA0E;AAE1E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,oDAAoD;IACpD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,2CAA2C;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAClD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAClE,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,WAAW,MAAM,EAAE,CAAC;IAC7B,CAAC;IAED,wBAAwB;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7E,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,iEAAiE;IACjE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,WAAmB;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC/B,CAAC"}

package/dist/http/request_id_middleware.d.ts

@@ -0,0 +1,38 @@
+type Req = {
+    headers: Record<string, string | string[] | undefined>;
+};
+type Res = {
+    setHeader: (name: string, value: string) => void;
+};
+type Next = () => void;
+/**
+ * Express-style middleware. Reads X-Request-Id from the incoming request,
+ * generates a new ID if absent, optionally echoes it on the response header,
+ * and runs the rest of the pipeline inside withContext({ correlationId }).
+ *
+ * Options:
+ *   generate       — override the ID generator (default: generateRequestId / UUID v7)
+ *   echoOnResponse — whether to echo the ID as a response header (default: true)
+ */
+export declare function createRequestIdMiddleware(opts?: {
+    generate?: () => string;
+    echoOnResponse?: boolean;
+}): (req: Req, res: Res, next: Next) => void;
+/**
+ * Next.js App Router route-handler wrapper.
+ *
+ * Reads the x-request-id header from the standard Request object (first
+ * argument to the route handler), wraps the handler in
+ * withContext({ correlationId }), and returns the result.
+ *
+ * Does NOT import from 'next' — uses the standard DOM Request type.
+ *
+ * @example
+ * export const GET = withRequestIdRouteHandler(async (req) => {
+ *   // getCorrelationId() is available anywhere downstream
+ *   return Response.json({ ok: true });
+ * });
+ */
+export declare function withRequestIdRouteHandler<H extends (...args: unknown[]) => unknown>(handler: H): H;
+export {};
+//# sourceMappingURL=request_id_middleware.d.ts.map

package/dist/http/request_id_middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request_id_middleware.d.ts","sourceRoot":"","sources":["../../src/http/request_id_middleware.ts"],"names":[],"mappings":"AAQA,KAAK,GAAG,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;CAAE,CAAC;AACtE,KAAK,GAAG,GAAG;IAAE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,CAAC;AAChE,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;AAEvB;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,CAAC,EAAE;IAC/C,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,CAe3C;AAMD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAgBlG"}

package/dist/http/request_id_middleware.js

@@ -0,0 +1,57 @@
+import { withContext } from '../context/server.js';
+import { REQUEST_ID_HEADER } from '../constants.js';
+import { generateRequestId } from '../utils/index.js';
+/**
+ * Express-style middleware. Reads X-Request-Id from the incoming request,
+ * generates a new ID if absent, optionally echoes it on the response header,
+ * and runs the rest of the pipeline inside withContext({ correlationId }).
+ *
+ * Options:
+ *   generate       — override the ID generator (default: generateRequestId / UUID v7)
+ *   echoOnResponse — whether to echo the ID as a response header (default: true)
+ */
+export function createRequestIdMiddleware(opts) {
+    const generate = opts?.generate ?? generateRequestId;
+    const echoOnResponse = opts?.echoOnResponse ?? true;
+    return (req, res, next) => {
+        const incoming = req.headers[REQUEST_ID_HEADER];
+        const correlationId = (Array.isArray(incoming) ? incoming[0] : incoming) ?? generate();
+        if (echoOnResponse) {
+            res.setHeader(REQUEST_ID_HEADER, correlationId);
+        }
+        withContext({ correlationId }, next);
+    };
+}
+// ---------------------------------------------------------------------------
+// Next.js App Router wrapper
+// ---------------------------------------------------------------------------
+/**
+ * Next.js App Router route-handler wrapper.
+ *
+ * Reads the x-request-id header from the standard Request object (first
+ * argument to the route handler), wraps the handler in
+ * withContext({ correlationId }), and returns the result.
+ *
+ * Does NOT import from 'next' — uses the standard DOM Request type.
+ *
+ * @example
+ * export const GET = withRequestIdRouteHandler(async (req) => {
+ *   // getCorrelationId() is available anywhere downstream
+ *   return Response.json({ ok: true });
+ * });
+ */
+export function withRequestIdRouteHandler(handler) {
+    return ((...args) => {
+        // The first argument for Next.js route handlers is the Request object
+        const req = args[0];
+        let correlationId;
+        if (req instanceof Request) {
+            correlationId = req.headers.get(REQUEST_ID_HEADER) ?? undefined;
+        }
+        if (!correlationId) {
+            correlationId = generateRequestId();
+        }
+        return withContext({ correlationId }, () => handler(...args));
+    });
+}
+//# sourceMappingURL=request_id_middleware.js.map

package/dist/http/request_id_middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request_id_middleware.js","sourceRoot":"","sources":["../../src/http/request_id_middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAUtD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAGzC;IACC,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,iBAAiB,CAAC;IACrD,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC;IAEpD,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAU,EAAQ,EAAE;QAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAChD,MAAM,aAAa,GACjB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;QAEnE,IAAI,cAAc,EAAE,CAAC;YACnB,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAClD,CAAC;QAED,WAAW,CAAC,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CAA4C,OAAU;IAC7F,OAAO,CAAC,CAAC,GAAG,IAAe,EAAE,EAAE;QAC7B,sEAAsE;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,aAAiC,CAAC;QAEtC,IAAI,GAAG,YAAY,OAAO,EAAE,CAAC;YAC3B,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAC;QAClE,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,aAAa,GAAG,iBAAiB,EAAE,CAAC;QACtC,CAAC;QAED,OAAO,WAAW,CAAC,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC,CAAM,CAAC;AACV,CAAC"}

package/dist/index.client.d.ts

@@ -0,0 +1,16 @@
+/**
+ * hazo_core — browser-safe entry point
+ *
+ * This file must never import node:* modules. It provides the subset of hazo_core
+ * that is safe to bundle for browsers.
+ *
+ * CI enforces the no-node-imports boundary via scripts/audit_client_boundary.js.
+ */
+export { REQUEST_ID_HEADER, HAZO_ERROR_SYMBOL, HAZO_SINGLETONS_KEY } from './constants.js';
+export { registerSingleton, getSingleton } from './singleton/index.js';
+export { HazoError, HazoValidationError, HazoAuthError, HazoNotFoundError, HazoConflictError, HazoConfigError, HazoExternalError, HazoRateLimitError, HazoUnavailableError, HazoInternalError, fromZodValidation, fromZodConfig, } from './errors/index.js';
+export type { HazoErrorOptions, HazoValidationErrorOptions, ValidationIssue, HazoAuthErrorOptions, HazoNotFoundErrorOptions, HazoConflictErrorOptions, HazoConfigErrorOptions, HazoExternalErrorOptions, HazoRateLimitErrorOptions, HazoUnavailableErrorOptions, HazoInternalErrorOptions, } from './errors/index.js';
+export { setBrowserCorrelationId, getContext, getCorrelationId, withContext, } from './context/client.js';
+export type { HazoContext } from './context/types.js';
+export { generateRequestId, safeJsonParse, formatBytes, formatDateShort, formatDateLong, formatDateSlash, formatCurrency, formatNumber, formatBoolean, getInitials, } from './utils/index.js';
+//# sourceMappingURL=index.client.d.ts.map

package/dist/index.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.client.d.ts","sourceRoot":"","sources":["../src/index.client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG3F,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGvE,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,gBAAgB,EAChB,0BAA0B,EAC1B,eAAe,EACf,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,uBAAuB,EACvB,UAAU,EACV,gBAAgB,EAChB,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,EACd,eAAe,EACf,cAAc,EACd,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,kBAAkB,CAAC"}

package/dist/index.client.js

@@ -0,0 +1,19 @@
+/**
+ * hazo_core — browser-safe entry point
+ *
+ * This file must never import node:* modules. It provides the subset of hazo_core
+ * that is safe to bundle for browsers.
+ *
+ * CI enforces the no-node-imports boundary via scripts/audit_client_boundary.js.
+ */
+// Constants (no Node deps)
+export { REQUEST_ID_HEADER, HAZO_ERROR_SYMBOL, HAZO_SINGLETONS_KEY } from './constants.js';
+// Singleton registry (no Node deps — uses globalThis)
+export { registerSingleton, getSingleton } from './singleton/index.js';
+// Errors (no Node deps — uses globalThis for correlationId)
+export { HazoError, HazoValidationError, HazoAuthError, HazoNotFoundError, HazoConflictError, HazoConfigError, HazoExternalError, HazoRateLimitError, HazoUnavailableError, HazoInternalError, fromZodValidation, fromZodConfig, } from './errors/index.js';
+// Context (browser — mutable ref, NOT AsyncLocalStorage)
+export { setBrowserCorrelationId, getContext, getCorrelationId, withContext, } from './context/client.js';
+// Safe utils (no Node deps)
+export { generateRequestId, safeJsonParse, formatBytes, formatDateShort, formatDateLong, formatDateSlash, formatCurrency, formatNumber, formatBoolean, getInitials, } from './utils/index.js';
+//# sourceMappingURL=index.client.js.map

package/dist/index.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.client.js","sourceRoot":"","sources":["../src/index.client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,2BAA2B;AAC3B,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE3F,sDAAsD;AACtD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEvE,4DAA4D;AAC5D,OAAO,EACL,SAAS,EACT,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,GACd,MAAM,mBAAmB,CAAC;AAe3B,yDAAyD;AACzD,OAAO,EACL,uBAAuB,EACvB,UAAU,EACV,gBAAgB,EAChB,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAG7B,4BAA4B;AAC5B,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,eAAe,EACf,cAAc,EACd,eAAe,EACf,cAAc,EACd,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,kBAAkB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * hazo_core — server entry point (Node.js)
+ *
+ * Exports all public API surface. See architecture.md §5 for the public API spec.
+ * Browser-safe consumers should use 'hazo_core/client' instead.
+ */
+export { REQUEST_ID_HEADER, HAZO_ERROR_SYMBOL, HAZO_SINGLETONS_KEY } from './constants.js';
+export { registerSingleton, getSingleton } from './singleton/index.js';
+export { getCurrentEnv, generateRequestId, optional_import, safeJsonParse, sleep, formatBytes, formatDateShort, formatDateLong, formatDateSlash, formatCurrency, formatNumber, formatBoolean, getInitials, format_date, format_date_range, DEFAULT_DATE_FORMAT, } from './utils/index.js';
+export type { DateFormat } from './utils/index.js';
+export { HazoError, HazoValidationError, HazoAuthError, HazoNotFoundError, HazoConflictError, HazoConfigError, HazoExternalError, HazoRateLimitError, HazoUnavailableError, HazoInternalError, fromZodValidation, fromZodConfig, } from './errors/index.js';
+export type { HazoErrorOptions, HazoValidationErrorOptions, ValidationIssue, HazoAuthErrorOptions, HazoNotFoundErrorOptions, HazoConflictErrorOptions, HazoConfigErrorOptions, HazoExternalErrorOptions, HazoRateLimitErrorOptions, HazoUnavailableErrorOptions, HazoInternalErrorOptions, } from './errors/index.js';
+export { withContext, getContext, getCorrelationId, } from './context/index.js';
+export type { HazoContext } from './context/index.js';
+export { loadConfig, defineConfig, reloadConfig } from './config/index.js';
+export { createLogger } from './logger/index.js';
+export type { HazoCoreLogger } from './logger/index.js';
+export { createDebug } from './debug/index.js';
+export type { HazoCoreDebug } from './debug/index.js';
+export { createRequestIdMiddleware, withRequestIdRouteHandler, } from './http/request_id_middleware.js';
+export { fetchWithRequestId } from './http/fetch_with_request_id.js';
+export { get_origin_url, create_redirect_url } from './http/get_origin_url.js';
+//# sourceMappingURL=index.d.ts.map